uninstall.exe

Rational Thought Solutions

This is the uninstall module for the Injekt branded web browser extension program which injects advertising in the web browser as well as modifies the browser settings. The uninstaller is registered within Control Panel > Add/Remove Programs. The application uninstall.exe by Rational Thought Solutions has been detected as adware by 6 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program Health Alert by Rational Thought Solutions. This file is typically installed with the program Health Alert by Rational Thought Solutions LLC which is a potentially unwanted software program.
Publisher:
Rational Thought Solutions  (signed and verified)

MD5:
a8e095b974a14ddd4f1e7b10ae057ca5

SHA-1:
3734e9f43fc7c51b26870e02ff44b1365b2a922d

SHA-256:
5e29a361fb1b1d7faa37baf1356891507e9264ba2100ebc7da1c51a5e647f53e

Scanner detections:
6 / 68

Status:
Adware

Explanation:
Injects display ads (banner ads), in-text ads, interstitial ads, or other types of ads in the web browser as well as alters the browsers settings (home page, search, DNS, and security protocols).

Analysis date:
4/27/2024 3:20:06 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3179

Bkav FE
W32.HfsAdware
1.3.0.6379

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
1.0.0.1015

Reason Heuristics
PUP.Injekt
15.3.6.1

Vba32 AntiVirus
AdWare.MSIL.PullUpdate
3.12.26.3

File size:
524.5 KB (537,072 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\application data\healthalert\uninstall.exe

Digital Signature
Authority:
Symantec Corporation

Valid from:
1/24/2015 5:30:00 AM

Valid to:
4/25/2016 5:29:59 AM

Subject:
CN=Rational Thought Solutions, O=Rational Thought Solutions, L=St. James, S=St. James, C=BB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
00B81C1C4DB6AD87B9B581116F115E4C

File PE Metadata
Compilation timestamp:
3/5/2015 12:52:42 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:5gllhn3OW5rFbCatGM8q0tCH3BggR5ADkFxfxrGEtXi:5eX5RhsCH3B3ADuxCEtXi

Entry address:
0x429CF

Entry point:
E8, F0, D4, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, EC, 84, 47, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, 60, 60, 47, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, EC, 84, 47, 00, 00, 0F, 83, A7, 01, 00, 00, F7, C7, 03, 00, 00, 00, 0F, 85, B8, 01, 00...
 
[+]

Entropy:
6.3255

Code size:
390.5 KB (399,872 bytes)

Program Uninstaller
Program name:
Health Alert

Display publisher:
Rational Thought Solutions

Display version:
2.7.60

Uninstall string:
C:\ProgramData\HealthAlert\uninstall.exe /kb=y /ic=1


The file uninstall.exe has been discovered within the following program.

Health Alert  by Rational Thought Solutions LLC
Health Alert from Injekt is a web browser extension that displays advertising in the user's web browser as well as may bundle additional software during the installation including toolbars for search.
89% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security